CVE-2019-6968

CVE-2019-6968 affects the D-Link DVA-5592 (firmware 20180823); the web interface is vulnerable to XSS via directly reflected HTML form parameters. Red Hat entries concur the same D-Link XSS issue. The connected documents do not provide exploit details or remediation; no fix/version is specified i...

CVE-2018-17777

The CVE-2018-17777 entry describes a credential-bypass on D-Link DVA-5592 A1_WI_20180823 devices. If the Parental Control PIN on the page /ui/cbpc/login is the default 0000, an attacker can bypass the login form by editing the path of the cookie sid, gaining administrator access to the router con...

CVE-2019-6969

The Red Hat CVE-2019-6969 entry confirms a vulnerability in the D-Link DVA-5592 20180823 web interface, caused by an authentication bypass that allows an unauthenticated user to access sensitive information (e.g., Wi-Fi password and VoIP-related phone numbers). Impact details from the original en...